Static task
static1
Behavioral task
behavioral1
Sample
e6cfd10d0e8d311d24fa28a65fd2a14460e3ea711f03ce8923bf35725b136d2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6cfd10d0e8d311d24fa28a65fd2a14460e3ea711f03ce8923bf35725b136d2c.exe
Resource
win10v2004-20220812-en
General
-
Target
e6cfd10d0e8d311d24fa28a65fd2a14460e3ea711f03ce8923bf35725b136d2c
-
Size
13KB
-
MD5
9202436db0f5f3e88ca28d9440363c78
-
SHA1
170e173b6d054c18cfef727fe520fe4ceedc8c64
-
SHA256
e6cfd10d0e8d311d24fa28a65fd2a14460e3ea711f03ce8923bf35725b136d2c
-
SHA512
db43370470d21dd59fe0abd4cf7d4ecefdfb1783b51f7a7da1f50f871c5465c8e3e8982e3d855be05ae232849b5154601e8a7c98edbcdc805b9c5a2da0649119
-
SSDEEP
192:PvGb1WEGapxHLuIvBvuNKn0/M81DmuhqFi1eo60PpUwuu:nK8spfvunmdAeoPPp7
Malware Config
Signatures
Files
-
e6cfd10d0e8d311d24fa28a65fd2a14460e3ea711f03ce8923bf35725b136d2c.exe windows x86
2cb40f7956685758def41c4a204f65ed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetStartupInfoW
GetStartupInfoA
ConvertThreadToFiber
CreateFileW
ExitProcess
MapUserPhysicalPagesScatter
ReadConsoleOutputAttribute
ReadFileEx
WaitForMultipleObjects
FormatMessageW
GetModuleHandleW
msvcrt
memset
advapi32
RegOpenKeyA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ